$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87a3935e-91bd-3d5c-95f5-cf54be05750d.roa File: 87a3935e-91bd-3d5c-95f5-cf54be05750d.roa (raw, json) Hash identifier: /0NZE4Wd1yTtaB4S8XYERjunVzDgLtrSJie3xqWfsDc= Subject key identifier: 3F:1B:67:32:60:90:88:84:98:31:A2:C6:04:53:74:0E:FB:45:16:A7 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F4328584AB377E454047EC3FE17DEA680 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87a3935e-91bd-3d5c-95f5-cf54be05750d.roa Signing time: Thu 31 Jul 2025 12:32:01 +0000 ROA not before: Thu 31 Jul 2025 12:32:01 +0000 ROA not after: Wed 29 Oct 2025 12:32:01 +0000 asID: 36621 IP address blocks: 192.82.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b3:77:e4:54:04:7e:c3:fe:17:de:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Jul 31 12:32:01 2025 GMT Not After : Oct 29 12:32:01 2025 GMT Subject: CN=498d0d2d-8340-4b09-8ae1-063bcb3e6650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7d:34:a5:87:74:87:c9:ad:b0:93:c4:66:b4: 93:64:96:e7:0c:98:e9:df:e6:77:51:1a:ec:f1:d7: a3:b3:e2:6b:fb:ae:b5:e3:09:c4:cc:90:a5:17:5c: b0:e0:ff:ef:80:b8:05:81:f0:bf:7d:99:32:f3:fb: 3c:86:2c:6e:c2:92:68:08:92:a5:b2:68:26:52:55: f0:8d:9e:e3:d5:89:4c:39:58:a1:15:9b:1e:c6:ff: 71:21:4c:e4:92:df:93:b0:e6:f4:fc:44:2b:7c:72: 94:72:80:e3:7a:44:3d:00:47:12:4e:e6:18:1a:4c: 97:7c:d1:3c:02:16:f0:9c:5c:51:d7:8a:cf:b7:18: 87:9c:54:b0:49:e4:07:12:87:5c:e7:73:0f:85:6b: a7:a0:65:a0:0c:ba:82:ba:e0:5d:e0:25:dc:bd:43: a8:9c:99:04:1a:91:8e:a9:9b:7d:48:0c:b0:1d:0e: 18:f4:14:cb:f4:ac:3b:56:4a:d6:0f:e2:10:c0:83: 2b:77:32:8a:39:df:26:3e:c0:15:f1:d1:b9:9c:bc: d2:53:28:00:ed:d3:c6:60:73:ed:5d:42:e7:df:ad: 90:ae:5a:a2:14:ba:74:cc:07:a6:b9:fb:1f:ec:12: 75:75:5e:f8:b2:17:71:6f:61:8e:f8:aa:4b:33:35: be:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:1B:67:32:60:90:88:84:98:31:A2:C6:04:53:74:0E:FB:45:16:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/87a3935e-91bd-3d5c-95f5-cf54be05750d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 192.82.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:0a:29:3a:18:9e:1c:19:92:19:bc:4c:f5:db:a3:62:db:70: d8:2f:2f:bd:f0:50:20:b6:3c:88:ba:c2:20:89:86:a6:57:63: 14:17:57:d0:0e:1c:31:74:39:a1:32:23:ea:80:b0:49:14:b4: 5b:88:f6:ba:ed:af:57:4e:a9:c0:08:cf:b6:72:ed:23:f8:8c: 9d:b7:eb:e6:49:dd:64:41:7b:2b:10:30:c7:7f:2c:8e:c4:b9: 70:c9:25:bc:b0:56:0f:a3:39:54:ab:82:1a:c4:be:6c:f4:29: 12:ff:60:ec:e6:41:04:67:f6:85:b6:ef:6c:f9:ab:09:01:b2: 10:e9:d4:a9:bf:76:ce:83:0f:fe:20:01:96:b2:e8:45:c7:94: e4:e3:96:f4:49:d8:5e:59:c0:f1:79:53:e6:96:4f:e6:b9:1d: 7a:7f:39:49:ca:8b:dc:13:89:fd:e4:2f:7d:09:76:9b:1e:e8: 32:1e:06:5e:4b:8e:f9:62:54:f2:de:a5:9e:14:aa:b4:c9:26: 23:1a:29:cb:92:32:6d:72:45:c1:4b:1d:12:a7:6f:39:6a:69: b7:ea:ed:ca:3a:87:9e:81:67:03:11:67:83:f6:9a:89:d1:a4: f9:8d:8d:fa:eb:3f:1f:01:88:45:d5:13:cd:46:86:29:f7:62: aa:4e:57:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzd+RUBH7D/hfepoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDczMTEyMzIwMVoXDTI1MTAyOTEyMzIwMVowLzEtMCsGA1UEAxMk NDk4ZDBkMmQtODM0MC00YjA5LThhZTEtMDYzYmNiM2U2NjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh300pYd0h8mtsJPEZrSTZJbnDJjp3+Z3URrs 8dejs+Jr+6614wnEzJClF1yw4P/vgLgFgfC/fZky8/s8hixuwpJoCJKlsmgmUlXw jZ7j1YlMOVihFZsexv9xIUzkkt+TsOb0/EQrfHKUcoDjekQ9AEcSTuYYGkyXfNE8 AhbwnFxR14rPtxiHnFSwSeQHEodc53MPhWunoGWgDLqCuuBd4CXcvUOonJkEGpGO qZt9SAywHQ4Y9BTL9Kw7VkrWD+IQwIMrdzKKOd8mPsAV8dG5nLzSUygA7dPGYHPt XULn362QrlqiFLp0zAemufsf7BJ1dV74shdxb2GO+KpLMzW++QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8bZzJgkIiEmDGixgRTdA77RRanMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODdhMzkzNWUtOTFiZC0z ZDVjLTk1ZjUtY2Y1NGJlMDU3NTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFKFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEKKToYnhwZkhm8TPXbo2LbcNgvL73wUCC2PIi6wiCJhqZXYxQXV9AO HDF0OaEyI+qAsEkUtFuI9rrtr1dOqcAIz7Zy7SP4jJ236+ZJ3WRBeysQMMd/LI7E uXDJJbywVg+jOVSrghrEvmz0KRL/YOzmQQRn9oW272z5qwkBshDp1Km/ds6DD/4g AZay6EXHlOTjlvRJ2F5ZwPF5U+aWT+a5HXp/OUnKi9wTif3kL30Jdpse6DIeBl5L jvliVPLepZ4UqrTJJiMaKcuSMm1yRcFLHRKnbzlqabfq7co6h56BZwMRZ4P2monR pPmNjfrrPx8BiEXVE81Ghin3YqpOV24= -----END CERTIFICATE-----Generated at Wed Aug 6 04:15:00 2025 by rpki-client